Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/UEPJ_iLOcuJkEm6p_f046rweDso.roa
File: UEPJ_iLOcuJkEm6p_f046rweDso.roa (raw, json)
Hash identifier: 0O2WW0FGFW1l0FRoL77emS7Mg/kmPdkSXnxk7m+91+Y=
Subject key identifier: 50:43:C9:FE:22:CE:72:E2:64:12:6E:A9:FD:FD:38:EA:BC:1E:0E:CA
Certificate issuer: /CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Certificate serial: 019034CB4308B96B821B8A7D6AAC6713C40E
Authority key identifier: 1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/UEPJ_iLOcuJkEm6p_f046rweDso.roa
Signing time: Thu 20 Jun 2024 08:37:34 +0000
ROA not before: Thu 20 Jun 2024 08:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198130
IP address blocks: 91.231.196.0/22 maxlen: 24
91.231.196.0/24 maxlen: 24
91.231.197.0/24 maxlen: 24
91.231.198.0/24 maxlen: 24
91.231.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 13:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:cb:43:08:b9:6b:82:1b:8a:7d:6a:ac:67:13:c4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Validity
Not Before: Jun 20 08:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5043c9fe22ce72e264126ea9fdfd38eabc1e0eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:d5:69:57:57:86:2c:4e:b3:1d:ea:5c:55:
19:7b:a2:0e:93:e2:94:a9:80:d5:f6:06:78:d6:f3:
82:04:68:61:51:d7:78:09:bd:28:d8:25:30:c0:f6:
60:af:de:ed:5f:39:2d:85:23:64:6c:99:a9:f2:22:
15:a8:61:3c:ff:e6:af:c4:fd:e4:3d:f1:35:53:22:
63:3b:87:20:04:22:d7:cf:a0:a5:f9:a6:6a:07:86:
3b:2f:0e:0a:9c:03:2f:b3:de:4d:5a:0c:28:d7:48:
71:57:72:22:88:c0:25:14:9d:34:9f:b3:e5:31:86:
cf:55:90:bc:d3:ca:f9:47:57:90:f9:01:38:1f:cf:
f3:69:e6:62:e7:16:dc:2f:e8:9c:b0:c2:19:13:a0:
16:7d:1b:34:83:d1:02:01:08:d8:7b:78:a9:c4:a0:
71:9b:e5:b3:2d:bd:49:6f:ae:55:ac:f6:db:e8:be:
05:bd:8b:ec:3b:d5:b0:28:ab:f0:53:bf:14:80:d7:
ce:6f:82:ab:0a:47:79:81:41:cd:be:0f:6a:b5:61:
3d:32:a8:af:ba:c6:43:86:5a:9e:67:9b:d3:e9:49:
79:a7:d8:29:95:9c:b9:5f:0c:6c:ff:20:39:57:34:
23:36:a3:3d:18:50:73:62:84:24:c0:fc:ae:73:c4:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:C9:FE:22:CE:72:E2:64:12:6E:A9:FD:FD:38:EA:BC:1E:0E:CA
X509v3 Authority Key Identifier:
keyid:1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/UEPJ_iLOcuJkEm6p_f046rweDso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.196.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:cd:ba:9b:da:5f:d4:30:78:90:bb:d0:ab:54:23:e2:7b:ba:
c0:dc:8c:6b:3d:5c:ea:3d:d4:a1:13:67:d7:e9:cc:29:16:d8:
ad:35:7d:03:d8:9b:4a:10:aa:8f:0f:8d:29:92:39:12:ac:16:
92:85:ed:b7:4d:b7:65:3a:3e:2c:d8:46:da:9d:66:e9:87:cf:
85:29:15:d9:cf:6f:18:41:96:fa:f9:37:c1:9d:11:de:07:fc:
d1:da:0b:84:83:83:82:8b:d6:34:5f:b6:df:5d:0a:7c:48:7d:
51:e1:64:19:ce:67:be:d3:36:77:0d:04:b4:01:12:bf:fd:21:
cd:00:0f:86:d4:e4:62:9f:67:b8:b9:4f:16:22:2d:99:c8:c5:
e0:78:81:81:8a:12:3b:fc:f7:58:1e:69:f4:fe:d8:f3:c3:ca:
00:69:a1:36:8d:f5:cd:ee:f7:cb:38:14:a2:b4:40:11:64:7c:
f5:c8:9c:a1:28:4c:83:30:b0:8f:77:33:6a:0a:a2:79:03:e0:
84:83:e3:20:02:ef:7e:87:f6:bb:59:2e:d3:29:15:93:dd:9b:
d9:74:6b:ba:7d:ac:82:b7:4b:d5:b3:b8:83:88:ad:f8:f8:b0:
8e:f6:e6:a2:51:84:c2:f8:ce:18:46:dd:a9:be:2b:b5:e6:68:
ab:e3:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 17:27:32 2024 by rpki-client on console-ams.rpki-client.org